$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft File: POusQFclHIqquVTcIgsiSWvu9WM.mft (raw, json) Hash identifier: x0stK+sLprkBQWNf6ERxKaFFUnddcx5yGIjgqt5wTcQ= Subject key identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Certificate serial: 02B4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft Manifest number: 02A9 Signing time: Sun 24 Nov 2024 06:53:36 +0000 Manifest this update: Sun 24 Nov 2024 06:53:36 +0000 Manifest next update: Tue 26 Nov 2024 06:53:36 +0000 Files and hashes: 1: 5kkjt29yn7Kj_FMjRfQA8269elQ.roa (hash: P2dJeH2Hq3LdnTr+dlFvv3uatyUvibXpTtftWzBcmuI=) 2: POusQFclHIqquVTcIgsiSWvu9WM.crl (hash: Azcg3pQNDBf7AeXchwHhczPvZIXNLnqGBliA7s7CvA4=) 3: objJj7wvy-_et92tNUx2pLZo5io.roa (hash: EnTaRy5TyoM1rnuNFheCaPsO4WRwqRSiLzhl/eiHmNo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Validity Not Before: Nov 24 06:53:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8CD023F29E25DE9D3BBA766BB4D1201BA7074DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:c8:2c:ab:24:28:82:73:e4:d4:7b:89:27: 22:a9:1c:80:9a:96:6e:19:52:cb:4c:30:68:87:42: 7f:4e:6d:9d:c7:f8:91:a0:af:55:5e:9d:a6:a5:5f: be:57:be:b8:69:95:fe:cd:2a:2d:8c:8a:73:01:61: 27:8a:8b:b4:22:c7:68:ed:bb:be:57:3b:e3:b6:e7: bd:b0:d0:c5:f0:64:ec:c1:48:5f:27:ce:ec:17:59: c0:57:3d:1c:ac:d2:70:13:2c:dc:64:24:13:19:51: cb:c3:d8:3c:35:6e:7e:e2:25:78:bd:36:23:42:fd: dc:7e:29:ba:73:59:ca:ab:eb:92:f8:89:39:4f:fe: f2:ee:10:fa:b9:32:81:2a:e6:1f:35:ec:ae:0f:f3: 70:7d:6e:0b:d6:6b:e4:ff:c4:9f:5a:85:db:63:50: ee:bf:f1:90:62:e9:2e:16:48:cf:c5:d6:e4:99:51: 45:57:ca:3f:14:60:e7:04:a6:06:ac:b0:ef:1c:24: 89:ca:f0:d5:b8:6f:73:20:ec:1f:42:6c:8e:fc:2c: 5d:2d:52:ab:1f:9f:ae:54:46:79:29:40:62:f5:08: da:05:bd:5b:c8:2f:d3:93:6b:00:b7:53:e3:9b:ec: c6:ad:f7:cc:f7:66:91:a7:9c:87:6f:01:ce:89:24: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB X509v3 Authority Key Identifier: keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d9:92:a6:cd:b5:3d:eb:ac:21:cd:02:b9:be:06:f7:a5:12: 32:ae:67:a3:9a:0b:95:d6:b9:42:ae:75:d2:fe:d9:e5:6b:13: 78:ea:cf:37:d6:63:a9:a1:6e:70:46:ac:44:dd:e9:c8:5e:dd: a6:d6:e2:cc:f5:87:08:13:a2:88:b3:de:a3:42:ac:88:fb:61: 19:bd:f6:69:cc:f6:56:f8:d7:05:be:74:0f:d4:60:20:c1:2f: 65:96:74:bb:82:f5:6e:8a:05:be:68:98:82:8e:6d:ca:fe:84: fd:32:be:3a:fc:01:79:ff:68:fb:ee:cf:06:de:43:6b:4d:6c: 79:ed:80:50:1d:ae:fe:40:41:38:68:32:5e:d2:3e:4b:a4:a3: 96:c6:0c:bb:bc:72:69:57:9a:31:f1:82:ff:b7:58:ec:f2:02: 00:76:06:80:a3:79:bd:66:f7:6c:74:ca:a9:66:4b:19:d5:a8: 34:96:ab:89:e4:1d:1f:e7:1e:d4:9a:80:4e:10:05:79:8f:ba: 55:26:ba:96:ac:36:95:d2:31:96:f8:4c:3a:4c:00:1f:4e:20: 92:c6:ab:8d:34:4a:12:17:e9:25:e4:b7:73:c3:4c:db:44:54: 4e:51:32:61:1a:07:cf:f1:f4:1b:f5:2d:3d:f8:06:b7:25:4a: a8:53:7b:e6 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICArQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNDExMjQw NjUzMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4Q0QwMjNGMjlFMjVE RTlEM0JCQTc2NkJCNEQxMjAxQkE3MDc0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkSMgsqyQognPk1HuJJyKpHICalm4ZUstMMGiHQn9ObZ3H+JGg r1VenaalX75Xvrhplf7NKi2MinMBYSeKi7Qix2jtu75XO+O2572w0MXwZOzBSF8n zuwXWcBXPRys0nATLNxkJBMZUcvD2Dw1bn7iJXi9NiNC/dx+KbpzWcqr65L4iTlP /vLuEPq5MoEq5h817K4P83B9bgvWa+T/xJ9ahdtjUO6/8ZBi6S4WSM/F1uSZUUVX yj8UYOcEpgassO8cJInK8NW4b3Mg7B9CbI78LF0tUqsfn65URnkpQGL1CNoFvVvI L9OTawC3U+Ob7Mat98z3ZpGnnIdvAc6JJIy5AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUyM0CPyniXenTu6dmu00SAbpwdNswHwYDVR0jBBgwFoAUPOusQFclHIqquVTc IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvUE91c1FGY2xI SXFxdVZUY0lnc2lTV3Z1OVdNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJPZkqbNtT3rrCHNArm+BvelEjKuZ6OaC5XWuUKuddL+2eVrE3jqzzfW Y6mhbnBGrETd6che3abW4sz1hwgTooiz3qNCrIj7YRm99mnM9lb41wW+dA/UYCDB L2WWdLuC9W6KBb5omIKObcr+hP0yvjr8AXn/aPvuzwbeQ2tNbHntgFAdrv5AQTho Ml7SPkuko5bGDLu8cmlXmjHxgv+3WOzyAgB2BoCjeb1m92x0yqlmSxnVqDSWq4nk HR/nHtSagE4QBXmPulUmupasNpXSMZb4TDpMAB9OIJLGq400ShIX6SXkt3PDTNtE VE5RMmEaB8/x9Bv1LT34BrclSqhTe+Y= -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:35 2024 by rpki-client on console-fra.rpki-client.org